people are threatening me on xbox live to hack my internet

As others have stated, do not reply to these people, block them and report them. Let the Enforcement Team handle the rest.

If you're worried about your account's security, change your password and add
two step authentication.

If you think your Microsoft account has been hacked follow the instructions here: https://support.xbox.com/en-US/my-account/security/compromised-account-solution

In case of denial of internet service follow instructions here: https://support.xbox.com/en-US/xbox-one/networking/dos-attacks-faq

I think they just trolling you. Ignore them and ban they gamertags.

Report them and block them then the enforcement team will look into it and they get banned if it's true

If you know that these people are scammers, do NOT trust them. Everything they say is just to intimidate and scare you. There is nothing serious they can actually do, so don't worry.

In order to deal with these scammers do the following:

Bring up their profile, and report them through the console's reporting feature. This puts them under investigation by the Xbox Live Policy Enforcement Team. If they sent you threatening or offensive messages, report these, as they are then sent in with
your report as evidence.

Then block these people on their profile page. Blocking and Muting these people prevents them from messaging you and to see what you are doing on Xbox Live.

And to be extra sure:

Go to
https://account.live.com/Proofs/Manage and turn on Two Step Verification (TSV) if not already done so.

After turning on TSV, set up the free Authenticator App according to the instructions below the setting to turn on TSV on that page.

After you installed the Authenticator App on your phone, no hacker can get into your account, unless they also physically steal your phone together with your account password.

If they threaten you to "boot" you offline or threaten with a DDoS attack:

Make sure you are not in the same multiplayer game as them, and that you are not in the same party as them.

And if they got your IP address from being in a party or multiplayer game with you, and they are DDoSing you, simply disconnect your internet for about 30 seconds. After reconnecting your Internet, you will have a new IP address, and the DDoS will go to
a different address.

So to sum it up:

• Report these guys.
• Make sure you use TSV with an Authenticator App
• Disconnect your Internet shortly when under a DDoS attack.